[ALSA-2026:82919] Moderate: environment-modules security update
Type:
security
Severity:
moderate
Release date:
2026-10-15
Description:
The environment-modules packages provide dynamic modification of user environment using module files. Each module file contains the information needed to configure the shell for an application. Once the package is initialized, the environment can be modified on a per-module basis using the "module" utility, which interprets module files. Security Fix(es): * environment-modules: Command injection in environment-modules Bash completion via malicious module names containing shell metacharacters (CVE-2026-85013) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Updated packages listed below:
Architecture Package Checksum
aarch64 environment-modules-4.5.2-5.el8_10.aarch64.rpm 56bf79202f7bc634e897d6be2d989aba476825bd733897cbfc516acc2f6a4831
ppc64le environment-modules-4.5.2-5.el8_10.ppc64le.rpm 57785584d359774c948ab6e7fd9512821c2283c8534519e09a57e6be246750c3
s390x environment-modules-4.5.2-5.el8_10.s390x.rpm 5e085322a6dd38a3e01c4d55a9aac3fe88040a1077fc45bac445517c1abb5f5a
x86_64 environment-modules-4.5.2-5.el8_10.x86_64.rpm d32fdc1e073ac6c5e4f8197b7cb74e3208cf412f54820cedf88c80211bfd12ea
Notes:
This page is generated automatically from Red Hat security data and has not been checked for errors. For clarification or corrections please contact the AlmaLinux Packaging Team.